Privacy Policy — Relay Partner App

This Policy applies to:

• Venue/business owners who register their venue(s) on Relay;
• Authorised managers, staff, or representatives who operate the Partner App on behalf of a listed venue;
• Any individual whose data is submitted to us in connection with venue onboarding (e.g., authorised signatories, bank account holders for payouts).

2.1 Information You Provide to Us

2.2 Information Collected Automatically

• Device information: device model, operating system, unique device identifiers, IP address, mobile network information.
• Usage data: app screens visited, features used, session duration, crash logs, and diagnostic data.
• Location data: with your permission, we collect precise or approximate location to verify venue address, show your venue accurately on the map, and enable location-based features. You may disable location permissions at any time via device settings, though this may limit certain features (e.g., auto-fetch venue address).
• Camera & storage access: used only when you choose to upload venue photos, documents, or profile images.
• Cookies/SDK identifiers: used within the app for analytics and performance monitoring (see Section 6).

2.3 Information from Third Parties

We may receive information about you from:

• Payment gateways and payout processors (transaction status, settlement confirmations);
• Google Play services (for install attribution, crash reporting);
• Verification/KYC service providers, where used.

We use the information we collect to:

1. Create and manage your Partner account and venue listings;
2. Verify venue ownership/authorisation and prevent fraudulent listings;
3. Process bookings made by Relay users and facilitate payouts to you;
4. Enable communication between you, Relay users, and Relay support;
5. Send booking alerts, transactional notifications, and service updates;
6. Analyse app usage to improve features, fix bugs, and enhance performance;
7. Detect, investigate, and prevent fraud, abuse, or violations of our Partner Terms;
8. Comply with applicable legal, tax, and regulatory obligations (e.g., GST invoicing, income reporting);
9. Send promotional or marketing communications about Relay features, with an option to opt out at any time.

We do not use your KYC or banking information for any purpose other than verification, payouts, and legal compliance.

Where applicable, we process your personal data on the basis of: (a) your consent; (b) performance of the Partner Terms & Conditions; (c) compliance with legal obligations; and (d) our legitimate interest in operating and securing the platform.

We do not sell your personal information. We may share information with:

• Relay users, limited to venue-facing information (venue name, address, photos, amenities, pricing, availability) necessary to enable bookings;
• Payment gateway and payout partners (e.g., Razorpay/Cashfree/similar) to process settlements — governed by their own privacy policies;
• Cloud hosting and infrastructure providers who store data on our behalf under contractual confidentiality obligations;
• Analytics and crash-reporting providers (e.g., Firebase/Google Analytics) to help us monitor and improve app performance;
• Professional advisors (auditors, legal counsel) where necessary;
• Law enforcement or regulators, if required by law, court order, or government request, or to protect the rights, property, or safety of Relay, our users, or the public;
• Successors, in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

The Partner App may integrate the following categories of third-party SDKs/services:

• Firebase (Analytics, Crashlytics, Cloud Messaging) — Google LLC
• Payment/payout gateway SDK
• Maps/location SDK (for address verification and pin placement)

Each provider processes data under its own privacy policy; we require these providers to maintain appropriate safeguards.

We retain your information for as long as your Partner account is active and for a reasonable period thereafter to comply with legal, tax, accounting, or dispute-resolution requirements (typically up to [7 years] for financial/transaction records, in line with statutory requirements under Indian law). You may request earlier deletion of non-statutory data as described in Section 9.

We implement reasonable technical and organisational safeguards — including encryption in transit, access controls, and secure hosting — to protect your data from unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023), you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data, subject to statutory retention requirements — see our dedicated account deletion page for the exact steps;
• Withdraw consent for optional processing (e.g., marketing communications) at any time;
• Lodge a grievance with our Grievance Officer (Section 12) or, where applicable, with the Data Protection Board of India.

To exercise these rights, contact us at [email protected]. We will respond within the timelines prescribed by applicable law.

The Partner App is intended for business use by individuals aged 18 years and above. We do not knowingly collect data from children. If we become aware that a minor has provided us personal data, we will delete it promptly.

Our servers/service providers may be located outside India. Where data is transferred internationally, we ensure such transfers are subject to appropriate safeguards consistent with applicable Indian data protection law.

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the Digital Personal Data Protection Act, 2023, the Grievance Officer for Relay is:

Name: Designated Grievance Officer, ASTRAION CORE LLP
Email: [email protected]
Address: A-422, Plot No 119, Icpo, Ichr Society, Sector-35, Noida, Uttar Pradesh 201301, India
Response Timeline: We will acknowledge grievances within 24 hours and resolve them within 15 days (or as prescribed by applicable law).

You can manage or revoke these permissions anytime via your device Settings.

We may update this Privacy Policy from time to time. Material changes will be notified via the app or email. Continued use of the Partner App after changes take effect constitutes acceptance of the revised Policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

ASTRAION CORE LLP
Email: [email protected]
Address: A-422, Plot No 119, Icpo, Ichr Society, Sector-35, Noida, Uttar Pradesh 201301, India